Security Directory

A

Acorn Welding

acornwelding.com

49

Acorn Welding is a specialized aviation welding company positioned as Canada's largest aircraft exhaust and engine mounts repair company and the world's largest radial and vintage aircraft exhaust repair company. Their website showcases a broad product catalog and manufacturing capabilities, targeting aviation professionals and aircraft owners globally. The business model combines manufacturing, repair services, and e-commerce sales. Technically, the website is built on Magento with modern JavaScript libraries and integrates analytics and customer support tools. Security posture is generally good with HTTPS and reCAPTCHA usage, but lacks comprehensive security headers and explicit privacy policies. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and clearer contact information.

Aerospace Manufacturing Inc. is an established company specializing in OEM contract manufacturing and commercial Maintenance, Repair & Overhaul (MRO) services for the aerospace industry. The company positions itself as an industry leader in aviation component manufacturing, focusing on tubular components, thin-wall welding, and precision machining. The website reflects a medium-sized business with a professional online presence, targeting aviation companies requiring manufacturing and MRO services. Technically, the website is built on WordPress using the Avada theme and Fusion Builder, with Cloudflare DNS services. The site is moderately optimized for performance and mobile devices, with good SEO practices implemented via Yoast SEO. However, there is room for improvement in accessibility and security hardening, such as enabling DNSSEC and adding security headers. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and security headers. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided, which limits transparency and compliance. No analytics or tracking services are detected, indicating minimal user tracking. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve user trust and regulatory adherence.

A

Aerospace Welding Minneapolis, Inc.

awi-ami.com

57

Aerospace Welding Minneapolis, Inc. (AWI) is a well-established company founded in 1993 specializing in the manufacturing and repair of general aviation aircraft exhaust systems and engine mounts. The company holds FAA certifications and offers a range of services including certified welding, precision machining, and sheet metal fabrication. Their market position is strong as a world leader in their niche, targeting aviation professionals and aircraft owners. The website reflects a medium-sized business with a professional online presence built on Magento CMS, featuring e-commerce capabilities and clear contact information. Technically, the website employs modern web technologies such as Magento 2, RequireJS, jQuery, and Bootstrap, with Cloudflare DNS and GoDaddy as the registrar. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS enforced and CAPTCHA on login, but improvements are recommended in DNSSEC deployment, cookie security flags, and security headers. Privacy compliance is basic with privacy and terms pages present but lacking explicit cookie consent mechanisms. Overall, the security posture is adequate but could be enhanced by implementing additional security headers and improving cookie security. No critical vulnerabilities or WAF blocking were detected, allowing full content accessibility. The business credibility is high, supported by FAA certifications and transparent contact details. The website is safe for general audiences with no adult or questionable content. Strategic recommendations include enabling DNSSEC, enforcing secure cookie flags, adding comprehensive security headers, and implementing explicit cookie consent to improve privacy compliance and user trust.

M

Megablog

mega-blog.cz

53

Megablog.cz is a Czech language blog platform associated with Megaflex, a company specializing in laser technology, stamps, and related manufacturing products. The website serves as a content hub for industry news, product updates, and company announcements, targeting business customers and industry professionals. The site is built on WordPress and employs a variety of plugins to enhance user experience and content management. It maintains a professional design with good navigation and mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though some security headers are missing. The absence of WHOIS data reduces transparency but the website content and external links to partner domains support its legitimacy.

H

Hvězdy dětem

hvezdydetem.cz

42

Hvězdy dětem is a Czech non-profit organization dedicated to supporting socially endangered children and children from children's homes by helping them fulfill their dreams and develop their talents. The organization operates through donations and an e-shop, engaging the community and leveraging celebrity involvement to enhance its outreach. The website is professionally designed using WordPress with Elementor and Astra theme, providing a good user experience and clear navigation. Technically, the site uses modern web technologies and includes security features such as HTTPS and Google reCAPTCHA for form protection. However, the absence of WHOIS data and lack of visible security headers slightly reduce the overall trustworthiness from a domain registration and security perspective. Privacy compliance is partially addressed with a privacy policy document, but cookie consent mechanisms are missing. Overall, the site is safe, well-structured, and credible as a charitable organization.

N

NOVÁ ŠKOLA, s.r.o.

nns.cz

54

NOVÁ ŠKOLA, s.r.o. is a Czech educational publisher specializing in textbooks, interactive learning materials, and educational software primarily targeting primary and secondary schools. The company operates an e-commerce platform offering these products and provides support and downloads for their interactive tools. The website is built on WordPress and uses modern web technologies including Google Tag Manager and Google Analytics with privacy-conscious consent settings. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content for its audience. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. WHOIS data for the domain is unavailable, which slightly reduces trustworthiness but does not negate the legitimacy indicated by the website content and business presence. Overall, the site is professional, secure, and compliant with GDPR requirements, serving its educational market effectively.

A

Aquatics Integrity Unit

aquaticsintegrity.com

54

Aquatics Integrity Unit is a recently established organization (domain created in December 2022) focused on promoting integrity within aquatic sports. The website is built on WordPress using Elementor and Astra theme, indicating a modern and flexible technical infrastructure. Hosting is provided by Infomaniak Network SA, a reputable provider. The site implements HTTPS and a cookie consent mechanism, reflecting basic compliance with privacy regulations. However, it lacks visible privacy policy, terms of service, and contact information, which limits transparency and user trust. Security posture is moderate with room for improvement in security headers and incident response disclosures. Overall, the website is professional but content is limited, suggesting an early-stage or niche-focused entity.

L

Lanes Health

laneshealth.com

64

Lanes Health is a well-established family-owned healthcare company with over 90 years of experience in manufacturing and distributing OTC medicines, food supplements, natural products, and confectionery. The company maintains a strong market presence in the UK and internationally through a portfolio of trusted brands such as Olbas, Jakemans, Kalms, and others. Their website reflects a professional and consistent brand image, targeting consumers, pharmacists, and retailers seeking quality health and wellbeing products. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Google Analytics and Tag Manager with privacy-conscious configurations such as IP anonymization. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made, such as implementing security headers and enhancing accessibility features. From a security perspective, the website uses HTTPS with a strong SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected in the content. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, despite the professional appearance and business information presented. Overall, the website is functional, secure, and compliant with privacy standards, but the domain registration inconsistency warrants further investigation. Strategic recommendations include improving security headers, publishing explicit security and incident response policies, and verifying domain registration details to enhance trust and credibility.

L

Lister Windows

listerwindows.co.uk

66

Lister Windows is a well-established UK-based manufacturer and supplier specializing in uPVC and aluminium windows, doors, and conservatory roofs. With over 40 years of experience, the company targets professional window and door installers, commercial contractors, and housing developers across the UK. Their business model focuses on B2B trade partnerships, offering scalable solutions, fast lead times, and comprehensive trade support including quoting and marketing portals. The company holds reputable certifications and has a strong market position as an award-winning fabricator.

E

Exostar

exostar.com

75

Exostar operates a secure and compliant collaboration platform targeting regulated industries such as aerospace, defense, healthcare, life sciences, and consumer services. The company provides a broad suite of solutions including cybersecurity, compliance management, supply chain collaboration, and clinical trials management. Their platform supports enterprise customers with secure access management and compliance readiness tools, positioning Exostar as a trusted partner in highly regulated sectors. Technically, the website is built on WordPress with modern SEO and analytics tools, demonstrating digital maturity and good performance. Security posture is strong with HTTPS enforcement and secure login portals, though explicit security headers and incident response information are not publicly detailed. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the website reflects a professional and trustworthy enterprise business, though the absence of WHOIS data reduces transparency and slightly impacts trust. Strategic recommendations include publishing security headers, incident response contacts, and vulnerability disclosure policies to enhance security posture and trust.

The website kronaby.cz represents Janeba Time, s.r.o., a small Czech retail business specializing in hybrid smartwatches under the Kronaby brand. The site provides product information and links to partner e-commerce platforms for purchase. The business targets consumers interested in classic design smartwatches with advanced technology. The website is built on the Incomedia WebSite X5 Pro CMS and uses modern web technologies including jQuery, Swiper.js, and Google Analytics. It is hosted likely by Forpsi, a Czech hosting provider, with domain registration consistent with the business age and location. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks some security headers and visible privacy or terms of service pages. No contact emails or phone numbers are explicitly provided on the main site, which may impact user trust and compliance. Overall, the site is professional and functional with moderate technical maturity.

R

Russell Stover

russellstover.com

71

Russell Stover is a well-established chocolate and candy brand operating a professional e-commerce website offering a wide range of products including traditional chocolates, gift baskets, and sugar-free options. The website targets consumers seeking quality confectionery gifts and personalized chocolate boxes. The business operates under the retail and e-commerce sectors and is a subsidiary of Lindt & Sprüngli, a globally recognized chocolate manufacturer. The website demonstrates consistent branding and good content quality, supporting its market position as a trusted chocolate retailer. Technically, the website is built on Magento Commerce with modern JavaScript frameworks and integrates multiple analytics and marketing platforms such as Google Tag Manager, Adobe Experience Cloud, and New Relic for performance monitoring. The site is mobile-optimized and employs standard SEO and accessibility practices, although accessibility could be improved further. Performance is moderate with room for optimization. From a security perspective, the website enforces HTTPS, uses standard security headers, and employs CAPTCHA on forms to mitigate automated abuse. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a publicly available security policy and incident response contact information suggests areas for improvement in transparency and readiness. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The main risk factor is the lack of WHOIS data, which may be due to privacy protection or query limitations but warrants monitoring. Strategic recommendations include publishing a security policy, enhancing incident response visibility, and improving accessibility compliance to further strengthen trust and security posture.

T

TYR

tyr.com

67

TYR is a retail and e-commerce company specializing in athletic shoes, training apparel, and competitive swimwear. The website targets athletes and fitness enthusiasts, offering products such as swimwear, swimming goggles, and triathlon gear. The site is built on the Magento platform and integrates various marketing and analytics tools including Google Tag Manager, Yotpo, and Klaviyo. The technical infrastructure is modern and supports a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and use of Google reCAPTCHA, though explicit security headers and privacy policies are not clearly visible. The site collects extensive user data for marketing purposes but lacks visible compliance documentation. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

M

Mohegan Sun

mohegansun.com

61

Mohegan Sun is a well-established casino and resort located in Connecticut, operating since 1998. It offers a comprehensive range of services including casino gaming, hotel accommodations, entertainment events, dining, nightlife, golf, spa, and meeting facilities. The website reflects a mature business with a strong market position as a leading hospitality and gaming destination. The site is professionally designed with good content quality and consistent branding, targeting adults interested in gaming and entertainment. Technically, the site uses Adobe Experience Manager CMS and integrates multiple modern marketing and analytics tools, though some improvements in security headers and cookie consent mechanisms are recommended. The security posture is good with HTTPS and domain protections in place, but DNSSEC is not enabled and CSP headers are missing. Overall, the domain registration data supports the legitimacy and long-term operation of the business. The site is adult-oriented due to gambling and nightlife content, with appropriate disclaimers and responsible gaming links.

W

Winter Wildlands Alliance

winterwildlands.org

42

Winter Wildlands Alliance is a well-established national non-profit organization dedicated to protecting America's wild snowscapes through education, advocacy, and community engagement. Their website reflects a professional and consistent brand presence, offering programs such as SnowSchool, Backcountry Film Festival, and policy advocacy. The organization targets outdoor enthusiasts, educators, and conservationists, leveraging memberships, donations, events, and merchandise sales as key revenue streams. Technically, the site is built on WordPress with a modern theme and plugins, hosted by SiteGround, and optimized for mobile with good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements like DNSSEC and security headers are recommended. The domain is long-standing and privacy-protected, consistent with the organization's profile, enhancing legitimacy. Overall, the website is trustworthy, content-rich, and serves its mission effectively.

S

Skratch Labs

skratchlabs.com

70

Skratch Labs is a specialized e-commerce company focused on providing real food-based sports nutrition products such as hydration mixes, energy bars, and recovery drinks. The company targets athletes and sports enthusiasts seeking science-backed nutrition solutions to enhance performance and endurance. Their market position is that of a niche but established brand emphasizing natural ingredients and digestive health. Technically, the website is built on the Shopify platform, leveraging a modern tech stack with integrations for analytics, marketing, and customer engagement tools. The site demonstrates good mobile optimization, SEO, and user experience, supporting a medium-sized business operation. Security-wise, the site enforces HTTPS, uses standard security headers, and employs CAPTCHA on forms, but lacks publicly available security policies or incident response information, which could be improved to enhance trust. Overall, the website is professional and trustworthy, though the absence of WHOIS data for the domain registration introduces some uncertainty regarding domain legitimacy.

D

DPS Skis

dpsskis.com

67

DPS Skis is a premium e-commerce business specializing in advanced skis made with aerospace carbon fiber technology. The company targets skiing enthusiasts seeking high-performance powder skis. Their market position is that of an innovative leader in ski manufacturing and retail. The website is built on Shopify, leveraging modern web technologies and marketing tools such as Klaviyo and Facebook Pixel. The site demonstrates good technical maturity with fast performance, mobile optimization, and accessibility features. Security posture is solid with HTTPS, frame busting, and cookie consent, though it lacks explicit security policies and incident response information. The absence of WHOIS data is a concern but the professional site and Shopify hosting mitigate risk. Overall, the site is trustworthy and well-constructed, supporting a medium-sized business in the outdoor sports retail sector.

FM Recruiter is a UK-based specialist job board focused on the facilities management sector, operated by Business Daily Group. The platform offers job listings, CV upload, job alerts, and career advice tailored to facilities management professionals and recruiters. The website is professionally designed with clear navigation and mobile optimization, supporting a positive user experience for its target audience. Technically, it is built on ASP.NET WebForms with common web technologies and integrates Google Analytics and Bing UET for tracking. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is addressed with clear privacy and cookie policies and consent mechanisms. Contact information is transparent and includes phone numbers, email, and a physical address, enhancing business credibility. Overall, FM Recruiter presents as a trustworthy and functional niche recruitment platform with room for security enhancements.

B

Business Daily Group Limited

businessdailygroup.co.uk

52

Business Daily Group Limited is a UK-based business support company specializing in helping ambitious organizations grow across multiple sectors including rail, facilities management, and hydrogen industries. The company offers a comprehensive suite of services such as business advice, marketing, media publishing, recruitment, and community building. Their market position is that of a trusted partner to hundreds of clients, with a strong focus on profile enhancement and sector-specific expertise. The website reflects a professional and consistent brand image, targeting businesses seeking growth and market expansion. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, indicating a modern and maintainable infrastructure. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate with no critical technical issues detected. The absence of advanced analytics or tracking scripts suggests a minimal user tracking approach. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and cookie consent mechanisms, which are recommended for GDPR compliance and enhanced security posture. No vulnerabilities or exposed sensitive data were detected. The WHOIS lookup for the 'www' subdomain failed due to domain naming rules, but the main domain appears legitimate with clear company registration details. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, privacy compliance, and incident response documentation would further strengthen the security posture and trustworthiness.

A

Asociace společenské odpovědnosti (A-CSR)

spolecenskaodpovednost.cz

50

Asociace společenské odpovědnosti (A-CSR) is the largest sustainability and ESG initiative in the Czech Republic, operating as a non-profit association. It focuses on promoting the UN Sustainable Development Goals (SDGs), organizing events such as the Global Goals Summit and Giving Tuesday, and providing networking opportunities for its members. The association also publishes newsletters and an online magazine to inform and engage its audience. The target audience includes organizations and individuals interested in sustainability and social responsibility within the Czech market. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Google Tag Manager, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing search engine visibility. Cookie consent and privacy policies are implemented in compliance with GDPR. From a security perspective, the website uses HTTPS with a strong SSL configuration and employs best practices such as cookie consent and nonce usage in scripts. However, security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found. The absence of WHOIS data is a concern for domain legitimacy, but the professional content and consistent branding support trustworthiness. Overall, the website presents a low risk profile with strong content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving incident response contact visibility to further strengthen security posture and trust.

B

BH Securities a.s.

bhs.cz

43

BH Securities a.s. is a well-established Czech financial services company specializing in investment services including stocks, qualified investor funds, asset management, and gold investments. With over 30 years of market presence and as a founding member of the Prague Stock Exchange, it serves individual, municipal, and institutional investors. The website reflects a mature digital presence with comprehensive product information, professional team bios, and clear contact channels. Technically, the site uses modern JavaScript libraries and includes cookie consent management, indicating compliance with privacy regulations. Security posture is solid with HTTPS and secure forms, though explicit security headers and published security policies are absent. WHOIS data is missing, which slightly impacts domain trustworthiness but does not detract from the overall legitimacy suggested by regulatory references and business details.

B

Biedriba "Rezeknes novada partneriba"

rezeknespartneriba.lv

50

Biedriba "Rezeknes novada partneriba" is a Latvian non-profit organization focused on regional partnership and development within the Rezekne municipality. The website serves as an informational platform for local stakeholders and community members. The business model is typical for a small non-profit entity, targeting local audiences with partnership and community engagement activities. The website uses WordPress with the Divi theme, indicating a moderate level of digital maturity with standard web technologies and common libraries such as jQuery and FontAwesome. The site is accessible and mobile-optimized but lacks advanced SEO and accessibility features. Security posture is basic, with no detected security headers or privacy policies, which presents compliance and risk gaps. The WHOIS data is partially consistent with the business identity but lacks registrar and creation date details, limiting full trust assessment. Overall, the site is functional but would benefit from enhanced security, privacy compliance, and richer content to improve trust and professionalism.

R

Rēzeknes novads

rezeknesnovads.lv

60

Rēzeknes novads is the official municipal government website serving the Rēzeknes novads region in Latvia. The site provides comprehensive information about local governance, public services, business support, tourism, and community participation. It targets residents, businesses, and visitors, offering multilingual support in Latvian, English, and Russian. The website is built on WordPress CMS, utilizing common plugins such as Yoast SEO and jQuery, and integrates Google Analytics for visitor tracking. The design is professional and mobile-optimized, with clear navigation and consistent branding. From a technical perspective, the site employs modern web technologies and maintains a moderate performance level. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure; however, it lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service found. The WHOIS data confirms domain legitimacy and consistency with the website's geographic and organizational claims. Overall, the website demonstrates a solid foundation for public service delivery with good user experience and trust indicators. Key areas for improvement include publishing comprehensive privacy and security policies, enhancing security headers, and providing incident response contact information to strengthen compliance and security posture.

A

AIJ Magazine

aijmagazine.co.uk

60

AIJ Magazine is a specialized media publication serving the Guild of Architectural Ironmongers and related professionals in the UK construction and manufacturing sectors. The website provides industry news, features, opinions, and digital editions, positioning itself as a niche authoritative source within its market. The business operates under the parent company Atom and has been active since 2020, with consistent branding and good content quality tailored to its professional audience. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, WP Rocket, and various JavaScript libraries for enhanced user experience and performance. Hosting is provided by 123-Reg Limited, a reputable registrar and hosting provider. The site demonstrates good mobile optimization, SEO practices, and fast loading times, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses some security plugins but lacks explicit security headers and published security policies. No cookie consent mechanism is present, which may impact privacy compliance. No incident response or vulnerability disclosure information is available, indicating room for improvement in security transparency and readiness. Overall, the website is professional, trustworthy, and well-maintained, with moderate security posture and privacy compliance. Strategic enhancements in security headers, privacy mechanisms, and incident response documentation would strengthen its risk profile and compliance standing.

L

LEN - European Aquatics

europeanaquatics.org

51

European Aquatics (LEN) is the official governing body for aquatic sports in Europe, managing disciplines such as swimming, diving, water polo, artistic swimming, open water swimming, and masters. The organization provides comprehensive event calendars, news updates, rules, and development programs to support aquatic sports across Europe. The website serves as a central hub for athletes, federations, and fans, offering structured information and media content. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and optimized for mobile devices. It integrates Google Analytics for user tracking and complies with GDPR through clear privacy and cookie policies. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and additional security headers could be added. Overall, the site is professional, trustworthy, and well-maintained, reflecting the organization's authoritative position in European aquatic sports.

O

Official FISU TORINO 2025 Product's Store

wugtorino2025.it

45

The website www.wugtorino2025.it/en is the official e-commerce store for the FISU Torino 2025 World University Games, offering official merchandise such as apparel, accessories, and memorabilia. It targets fans, participants, and the general public interested in event-related products. The site is built on the PrestaShop CMS platform and incorporates modern web technologies including Google reCAPTCHA for form security and structured data for SEO enhancement. The design is professional and mobile-optimized, providing a good user experience with clear navigation and consistent branding. From a security perspective, the site enforces HTTPS and includes several security headers, demonstrating a good security posture. The use of Google reCAPTCHA helps mitigate automated abuse on forms. However, the absence of explicit privacy and terms of service pages indicates gaps in compliance and transparency. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's purpose and geographic focus, supporting legitimacy. Overall, the site is a trustworthy and functional e-commerce platform for official event merchandise, but it would benefit from enhanced privacy compliance and clearer legal documentation to improve user trust and regulatory adherence.

M

Microplus Informatica

microplustimingservices.com

53

Microplus Informatica is an established Italian company specializing in sports event timing and results management, with a strong presence in aquatic and multisport events internationally and nationally. The website serves as a portal for event results and related information, targeting sports organizations, athletes, and fans. The company leverages WordPress with Elementor and several specialized plugins to deliver a content-rich and user-friendly experience. The technical infrastructure is modern and well-maintained, hosted likely on SiteGround, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, DNSSEC, and GDPR compliance, though some advanced security headers and policies could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the website reflects a professional and trustworthy business with a clear market position in sports timing services.

A

Allegra Passugger Mineralquellen AG

passugger.ch

63

Allegra Passugger Mineralquellen AG is a well-established Swiss mineral water producer, operating since 1896. The company positions itself as an independent and traditional mineral water brand from Graubünden, emphasizing natural purity, sustainability, and strong partner relationships. Their product portfolio includes private label offerings and special editions such as the Crystal Edition. The website reflects a mature digital presence built on WordPress with modern technologies like Bootstrap and jQuery, enhanced by SEO tools such as Yoast. It features a cookie consent mechanism compliant with GDPR, and clear contact information, supporting transparency and user trust. Security posture is solid with HTTPS and cookie consent, though lacking explicit security policies or incident response contacts. Overall, the site is professional, user-friendly, and trustworthy, with moderate tracking via Google Analytics and no suspicious content or blocking mechanisms detected.

V

Verein Auswärtige Liegenschaftsbesitzer Bergün Filisur (ALB)

alb-berguen.ch

52

The website represents the Verein Auswärtige Liegenschaftsbesitzer Bergün Filisur (ALB), a small non-profit association founded in 2015 in Switzerland. It advocates for the interests of second-home owners and long-term tenants in the Bergün-Filisur region, fostering collaboration between local residents and external property owners. The site provides organizational information, event announcements, and contact details, targeting property owners and local stakeholders. Technically, the site is built on Drupal 10 with modern web technologies and includes Google Analytics for visitor tracking. The design is professional, mobile-optimized, and accessible, offering a good user experience. Security posture is adequate with HTTPS enforced but lacks security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the site is legitimate, trustworthy, and safe for general audiences.

G

Graubündner Kantonalbank

gkb.ch

69

Graubündner Kantonalbank is a well-established regional cantonal bank in Switzerland, offering a broad range of financial services including retail banking, private banking, mortgages, and digital banking solutions. The bank holds a strong market position in the Graubünden region, supported by a state guarantee and a history dating back to 1870. The website reflects a mature digital presence with comprehensive service information and customer engagement channels.

W

Walservereinigung Graubünden

walserverein-gr.ch

58

Walservereinigung Graubünden is a well-established non-profit cultural association founded in 1960, dedicated to preserving and promoting the Walser language and alpine culture in the Graubünden region of Switzerland. The organization serves a membership base of approximately 2000 individuals and several municipalities, offering cultural events, publications, and a dedicated online shop. The website reflects a consistent brand identity and provides clear contact information and social media presence, supporting community engagement and cultural education. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries for interactive features and responsive design, ensuring a good user experience across devices. Security posture is adequate with HTTPS enforced and secure login forms, but lacks explicit cookie consent and security headers, which are recommended for compliance and enhanced protection. Overall, the domain registration and WHOIS data align well with the organization's claims, indicating legitimacy and trustworthiness.

H

Hutschn GbR

creativealps.org

59

creativeALPS is a small, specialized consultancy and research organization focused on sustainable economic and societal development in the Alpine region. They serve private, public, and social sector clients by providing research, advisory, and project implementation support. The website is professionally designed using modern web technologies such as Webflow and integrates security features like Google reCAPTCHA and GDPR-compliant cookie consent mechanisms. While the website demonstrates good security practices including HTTPS and form protection, it lacks explicit security headers and publicly available WHOIS domain registration data, which slightly reduces trustworthiness. Overall, the site is accessible, well-structured, and provides clear contact information, supporting a positive business credibility profile.

BergBuchBrig is a Swiss-based multimedia festival focused on nature, culture, leisure, and mountain adventures. Established in 2006, it has grown into a recognized cultural event with a diverse program including book presentations, exhibitions, film screenings, concerts, and excursions. The website serves as an information portal for the festival, providing event dates, program details, and organizational information. The target audience includes culture and nature enthusiasts primarily in Switzerland and neighboring regions. Technically, the website is built on WordPress using a professional theme and plugins such as Essential Grid and All in One SEO Pro, indicating a moderate level of digital maturity. The site is mobile-optimized and includes structured data for SEO benefits. However, there is room for improvement in performance optimization and accessibility. From a security perspective, the site uses HTTPS and employs some email cloaking to protect contact information. However, it lacks visible security headers and formal security policies such as a security.txt or incident response contacts. Privacy compliance is weak due to the absence of privacy and cookie policies, which could pose regulatory risks. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

K

Kurhaus Bergün

kurhausberguen.ch

51

Kurhaus Bergün is a small hospitality business located in Switzerland, offering a range of services including hotel rooms, holiday apartments, dining, wellness treatments, and event hosting. The website reflects a well-established regional business with a focus on cultural heritage and sustainable tourism. The digital infrastructure is built on WordPress with WooCommerce, enhanced by SEO and multilingual plugins, indicating a mature and modern online presence. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms in place. No critical vulnerabilities or blocking mechanisms were detected, and the website maintains a professional and trustworthy appearance.

H

Hotel/Restaurant Piz Ela

pizela.ch

46

Hotel/Restaurant Piz Ela is a small hospitality business located in Bergün/Bravuogn, Switzerland, offering hotel accommodations and restaurant/pizzeria services. The website presents a professional and consistent brand image with clear contact information and environmental commitment messaging. The business targets tourists and visitors to the region seeking historic charm and local hospitality. Technically, the site is built on WordPress using the Bridge theme and WPBakery Page Builder, with modern libraries such as jQuery and Google reCAPTCHA integrated for form security. Performance and mobile optimization are good, though accessibility and SEO could be improved. Security posture is moderate with HTTPS enforced and reCAPTCHA implemented, but lacks explicit security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and functional with room for security and compliance enhancements.

G

Gemeinde Lantsch/Lenz Graubünden

lantsch-lenz.ch

50

The website www.lantsch-lenz.ch serves as the official online presence of the Gemeinde Lantsch/Lenz, a political municipality in the Albula region of the canton of Graubünden, Switzerland. It provides comprehensive information and services relevant to local residents and visitors, including municipal news, political governance, administrative services, tourism, and community events. The site is well-branded and structured to serve its target audience effectively. Technically, the website is built on the Joomla CMS platform with the Yootheme theme and utilizes modern web technologies such as jQuery, UIkit, and Font Awesome. It is mobile-optimized and includes accessibility features, providing a good user experience. Google Analytics is used for visitor tracking, indicating moderate user tracking practices. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, which are positive indicators. However, it lacks several important security headers and explicit privacy or cookie policies, which are compliance gaps. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is a trustworthy and professional municipal portal with good content quality and technical implementation. The main areas for improvement include adding privacy and cookie policies to enhance GDPR compliance and implementing additional security headers to strengthen the security posture.

R

Rhätische Bahn AG

rhb.ch

49

Rhätische Bahn AG is a well-established Swiss railway company specializing in scenic and regional rail travel in the Graubünden region. The company offers a variety of services including ticket sales, panoramic train experiences such as the Bernina and Glacier Express, and leisure travel options. Their website reflects a strong market position with comprehensive content targeting tourists and railway enthusiasts. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and leverages CDN services for performance. The site is mobile-optimized, accessible, and SEO-friendly. Security-wise, the website enforces HTTPS, includes important security headers, and uses consent management tools for privacy compliance. However, explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, trustworthy, and compliant with GDPR regulations.

E

Ennio Mattarelli

mattarelliennio.com

50

Ennio Mattarelli is a specialized manufacturer of clay target shooting machines based in Bologna, Italy, with a history dating back to 1988. The company offers a range of products including Olympic and Sporting lines, targeting professional shooters, sporting clubs, and distributors. Their market position is supported by sponsorships and official approvals from shooting sport organizations. The website reflects a professional and consistent brand image with clear product information and contact details. Technically, the site uses modern web technologies such as jQuery, Bootstrap, and Google Analytics, and implements GDPR-compliant cookie consent mechanisms. However, the absence of WHOIS registration data raises some concerns about domain legitimacy, though the website content and business information appear authentic. Security posture is moderate with HTTPS usage and reCAPTCHA integration but lacks explicit security headers and published security policies. Overall, the site is well-designed and functional but would benefit from enhanced security documentation and verification of domain registration.

D

De.La.Ro.

delaro.it

61

De.La.Ro. is an Italian company specializing in the manufacturing and retail of tactical and shooting sports eyewear, including glasses and lenses. Established in 2018, the company positions itself as a niche player offering 100% made in Italy products, targeting shooting sports enthusiasts and tactical eyewear customers. Their business model is primarily e-commerce based, supported by a professional website with multilingual support and a clear product catalog. The company maintains a consistent brand image and leverages partnerships such as ISSF to enhance credibility. Technically, the website is built on WordPress with WooCommerce, utilizing modern web technologies including Bootstrap, jQuery, and integrations with Iubenda for privacy compliance and Microsoft Clarity for analytics. The site is mobile optimized and SEO friendly, with structured data and social media integration. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes security headers. Cookie consent is implemented with explicit withdrawal options, indicating good GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy or vulnerability disclosure page, which could enhance trust and incident response readiness. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a small specialized retail business. Strategic improvements in security transparency and accessibility could further strengthen its posture.

A

ARMI PERAZZI S.p.A.

perazzi.it

63

Armi Perazzi S.p.A. is a well-established Italian manufacturer specializing in handcrafted shotguns for competition and hunting, boasting over 60 years of artisanal expertise. The company holds a strong market position as a premium brand, supported by its association with the CSG Group and a US subsidiary, Perazzi USA Inc. Their product offerings include high-end firearms, showroom experiences, and after-sales services, targeting shooting sports enthusiasts and professional shooters worldwide. The website reflects this positioning with professional design, multilingual support, and ecommerce capabilities. Technically, the site employs a modern tech stack including Bootstrap and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA integration, though lacks some advanced security headers and explicit security policies. Privacy compliance is well addressed with cookie consent and GDPR-aligned privacy policies. Overall, the site is trustworthy and professional, with clear contact information and strong branding.

P

Promatic International Ltd

promatic.co.uk

69

Promatic International Ltd is a British manufacturer specializing in clay pigeon traps, simulated game trailers, and related shooting equipment. Established in 1999, the company holds a reputable market position as an official ISSF partner, targeting shooting sports enthusiasts and retailers. Their business model combines manufacturing with direct e-commerce sales via a professionally designed Shopify platform. The website reflects a medium-sized enterprise with consistent branding and good content quality. Technically, the site leverages modern e-commerce technologies including Shopify, jQuery, Google reCAPTCHA, and marketing integrations such as Facebook Pixel and Yotpo. Performance and mobile optimization are adequate, supporting a positive user experience. Security posture is strong with HTTPS and anti-bot measures, though explicit security headers and published security policies are absent. Privacy compliance is basic, with cookie consent mechanisms present but no visible privacy or terms of service pages. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

F

Fabbrica d’Armi Pietro Beretta

beretta.com

70

Fabbrica d’Armi Pietro Beretta is a historic firearms manufacturer established in 1526, specializing in pistols, guns, and accessories for hunting and shooting. The company maintains a strong global presence with a professional website showcasing its products, services, and brand heritage. The site targets hunters, shooting sports enthusiasts, and tactical users, offering a comprehensive catalog and customer services such as extended warranties and manuals. Technically, the website is built on Adobe Experience Manager with modern JavaScript libraries and tracking tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and OAuth2 authentication, though explicit security headers and detailed privacy policies are lacking. WHOIS data is unavailable, which slightly reduces trust but the overall brand legitimacy is high based on content and external references. Strategic improvements include enhancing privacy transparency, publishing security policies, and adding contact information for incident response.

I

ISSF - International Shooting Sport Federation

issf-shop.com

59

The ISSF Shop website serves as the official e-commerce platform for the International Shooting Sport Federation, offering a variety of branded merchandise including clothing and special edition items for events like Paris 2024. The site targets shooting sport enthusiasts and fans, providing a focused retail experience. Technically, the site is built on a modern WordPress platform with WooCommerce and Elementor, leveraging popular plugins and libraries to deliver a responsive and user-friendly interface. Security-wise, the site uses HTTPS and implements cookie consent via Iubenda, but lacks visible security headers and formal privacy or terms of service documentation, which are areas for improvement. The absence of WHOIS registration data raises concerns about domain legitimacy, although the site content and branding appear professional and trustworthy. Overall, the site is functional and secure at a basic level but would benefit from enhanced transparency and security practices.

K

Kliping - Agencija za praćenje i analizu medija - Beograd

kliping.rs

50

Kliping is a Serbian media monitoring and analysis agency established in 2008, providing comprehensive press clipping, social media monitoring, detailed media analysis, and translation services. The company targets PR and marketing professionals and businesses seeking efficient media insights. Their digital presence is built on WordPress with Elementor, integrating modern tracking and analytics tools such as Google Analytics and Facebook Pixel. The website is professionally designed, mobile-optimized, and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and reCAPTCHA, but lacks some advanced security headers and DNSSEC. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

N

Newton Media, a.s.

newtonmedia.eu

55

Newton Media, a.s. is a regional expert in media monitoring and analysis, offering services such as international media monitoring, tailored overviews, market research, and crisis communication. The company operates multiple subsidiaries across Central and Southeastern Europe, indicating a strong regional presence. The website is professionally designed using WordPress and Elementor, with modern analytics and cookie consent mechanisms implemented, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and use of Google reCaptcha, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR-aligned consent. Overall, the site presents a trustworthy and professional business front with room for enhanced transparency in security policies and contact information.

F

FABEX MEDIA

fabexmedia.cz

52

FABEX MEDIA is a regional media company based in Ostrava, Czech Republic, specializing in regional news reporting and video production. The website serves as a platform for delivering local news, interviews, promotional reports, and live streaming services, targeting the Moravská Ostrava and surrounding regional audience. The company maintains a professional online presence with consistent branding and active social media engagement primarily on Facebook. Technically, the website is built on WordPress with a modern plugin ecosystem including WooCommerce, Elementor, and Rank Math SEO, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS enforced and some security plugins in use, though security headers and vulnerability disclosure mechanisms are lacking. Privacy compliance is minimal with no visible privacy or cookie policies, which is a notable gap. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and structure indicate a legitimate regional media business.

Studio Kabelové televize Kopřivnice operates as a local cable television media outlet serving the Kopřivnice region in the Czech Republic. The website provides news, archived video content, live streaming via YouTube, and advertising services targeting local residents. The business model focuses on community engagement through media broadcasting and local advertising. The site is built on WordPress with common media and polling plugins, indicating a moderate level of digital maturity. While the site is accessible over HTTPS and includes social media integration, it lacks formal privacy and cookie policies, which impacts compliance posture. The absence of WHOIS data reduces domain trustworthiness, but the website content and social presence support legitimacy. Overall, the site is functional and relevant for its audience but would benefit from enhanced security and privacy practices.

O

Obec Kobeřice

koberice.cz

51

Obec Kobeřice operates an official municipal website serving the residents and visitors of Kobeřice, Czech Republic. The site provides comprehensive local government information including news, event calendars, official documents, contact details, and public tender information. It targets local citizens and stakeholders seeking municipal services and updates. The website is well-structured and branded consistently with the municipal crest, reflecting its governmental nature. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and other JavaScript libraries to deliver a responsive and user-friendly experience. The site is mobile optimized and uses HTTPS, ensuring secure communication. However, some accessibility features could be improved, and security headers are not explicitly detected. From a security perspective, the site demonstrates basic good practices such as HTTPS and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were found. The absence of a privacy policy and terms of service pages, along with missing WHOIS registration data, are notable gaps that affect trust and compliance. Overall, the website is a functional and professional municipal portal with moderate technical maturity and security posture. The lack of WHOIS data and privacy documentation suggests areas for improvement to enhance trustworthiness and regulatory compliance.

M

Město Brušperk

brusperk-mesto.cz

51

The website www.brusperk-mesto.cz serves as the official online presence for the municipal government of Brušperk, a small town in the Czech Republic. It provides comprehensive information and services for residents and visitors, including municipal administration details, public notices, citizen portals, local news, and contact information. The site targets local citizens and stakeholders interested in municipal affairs. Technically, the website employs common web technologies such as jQuery, Bootstrap, and Swiper.js, with a custom or proprietary CMS. It is mobile-optimized and features a clear navigation structure, though accessibility features are basic. Security-wise, the site uses HTTPS and a cookie consent mechanism but lacks visible security headers and published privacy or security policies. The absence of WHOIS data reduces domain trustworthiness, though the content and official branding suggest legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures.